Privacy Notice.
York Giving ("We") are committed to protecting and respecting your privacy.
This policy (together with our Terms and Conditions and any other documents referred to in them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us or on our behalf. Certain definitions set out in our Terms and Conditions also apply in this policy. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it for the purposes of the York Unlimited Giving Day.
By visiting the York Unlimited Giving Day website you are accepting and consenting to the practices described in this policy.
For the purpose of the Data Protection Act 1998 (the Act), the data controller is The University of York, Heslington, York, United Kingdom, YO10 5DD.
Information we may collect from you
We may collect and process the following information from you:
Information you give us.
You may give us information about you by filling in forms on our site unlimited.hubbub.net (the Site) or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you use the Site's social media functions, donate monies and when you report a problem with the Site. The information you give us may include your name, address, phone number, e-mail address, social media information, gift information, phone number, personal description, relationship to us and your Gift Aid choices. We may use the information you provide to update the details we hold for you on our database and use this for future communications and activities. If you wish to alter or remove any of the information you have given us, you can update your details or contact us on alumni@york.ac.uk.
Information we collect about your use of the site
technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the Site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our user service number. This information is not stored.
Information we receive from other sources.
We may receive information about you if you use any of the other websites we operate or the other services we provide, including publicly available social media information about you. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on the Site.
We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.
Your financial information.
Payment information is collected and stored via Stripe in line with its own privacy policy, which can be found via their website www.stripe.com/gb. Stripe is a Level 1 PCI DSS certified payment provider.
Cookies.
Cookies
The Site uses cookies to distinguish you from other users of the Site. This helps us to provide you with a good experience when you browse the Site and also allows us to improve the Site. By using the website and agreeing to this policy, you consent to our use of cookies in accordance with the terms of this policy.
Cookies are files, often including unique identifiers, that are sent by web servers to web browsers, and which may then be sent back to the server each time the browser requests a page from the server.
Cookies can be used by web servers to identity and track users as they navigate different pages on a website, and to identify users returning to a website.
Cookies may be either "persistent" cookies or "session" cookies. A persistent cookie consists of a text file sent by a web server to a web browser, which will be stored by the browser and will remain valid until its set expiry date (unless deleted by the user before the expiry date). A session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
This site uses “session” cookies as it does not require you to create an account to use the site and any information you provide during your session will not be remembered, unless you ask or confirm the site have permission to do so.
Cookies do not contain any information that personally identifies you, but personal information that we store about you may be linked, by us, to the information stored in and obtained from cookies. The cookies used on the website include those which are strictly necessary cookies for access and navigation, cookies that track usage (performance cookies), remember your choices (functionality cookies), and cookies that provide you with targeted content or advertising.
We may use the information we obtain from your use of our cookies for the following purposes:
- to understand your location, enabling a quicker user journey when completing forms where your address may be required
- to improve the website's usability
- to analyse the use of the website
- in the administration of the website.
This site does not send or use third party cookies
Most browsers allow you to refuse to accept cookies as well as allowing you to delete them. Please refer to your browsers settings for information on how to do this
Uses made of information
We will use information held about you in various ways:
We will use information that you give to us:
- to carry out our obligations arising from your interaction with the Site and/or your donation to us and to provide you with the information and services that you request from us;
- to provide you with information about appeals or other services you might be interested in that are similar to those that you have already registered for or enquired about;
- to notify you about changes to our services;
- to ensure that content from the Site is presented in the most effective manner for you and for your computer.
We will use information that we collect about you:
- to administer the Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve the Site to ensure that content is presented in the most effective manner for you and for your computer;
- to allow you to participate in interactive features of our service, including (but not limited to), donating to the York Unlimited Giving Day, and using social media tools, when you choose to do so;
- as part of our efforts to keep the Site safe and secure.
We may combine this with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
We may share your information with selected third parties including:
- Business partners, suppliers and sub-contractors for the delivery of the York Unlimited Giving Day, including, Sponsorcraft Limited, which operates the Site and processes your information on our behalf, and;
- Analytics and search engine providers that assist us in the improvement and optimisation of our site.
We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions and other agreements; or to protect the rights, property, or safety of The University of York, our customers, or others.
Where we store your personal data
As data controller, The University of York will hold your data securely under the terms of Data Protection Act and it will be treated confidentially and with the utmost care and respect.
All personal data collected via the site is securely held with our site provider, Sponsorcraft Limited. All information you provide to us is stored on secure servers located within the European Union in compliance with the EU Data Protection Directive, the EU-US Privacy Shield, or any other contractual clauses that are required for providing data holding adequacy. All data is held with the site provider for an agreed period of time so as to allow The University of York the ability to report on and to transfer over any and all data to its own internal systems.
Should data we collect from you need be transferred to, and stored at, a destination outside the European Economic Area ("EEA") it will always be under the provisions of the EU Data Protection Directive, the EU-US Privacy Shield, or contractual clauses providing adequacy. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.
As data processor, Sponsocraft will securely delete all data after it has transferred it back to The University of York.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Your rights
The Site may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Social sharing information is collected and stored via AddThis in line with their own privacy policy, which can be found via their website www.addthis.com.
Access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.
Changes to our privacy policy
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
Contact
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed either by post to Head of Operations and Experiences, Alumni House, 5 Main Street, Heslington, York, YO10 5DD or by email at alumni@york.ac.uk
This privacy policy should be read in conjunction with https://www.york.ac.uk/york-unlimited/about/privacy/
